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NATIONAL SECURITY AGENCY 
CENTRAL SECURITY SERVICE 

FORT GEORGE G. MEADE, MARYLAND 20755-6000 

9 June 2004 


MEMORANDUM FOR THE CHAIRMAN, INTELLIGENCE OVERSIGHT BOARD 

THRU: Assistant to the Secretary of Defense (Intelligence Oversight) 

SUBJECT: (U//FOUGT Report to the Intelligence Oversight Board on NSA 
Activities - INFORMATION MEMORANDUM 



(U/7F0U0) Except as previously reported to you or the President, or 
otherwise stated in the enclosure, we have no reason to believe that any intelligence 
activities of the National Security Agency during the quarter ending 31 March 2004, 
were unlawful or contrary to Executive Order or Presidential Directive, and thus 
required to be reported pursuant to Section 1.7.(d) of Executive Order 12333. 

(U// FQUO) The Inspector General and the General Counsel continue to 
exercise oversight of Agency activities by means of inspections, surveys, training, 
review of directives and guidelines, and advice and counsel. These activities and 
other data requested by the Boaixl or members of the staff of the Assistant to the 
Secretary of Defense (Intelligerme^Jversighti are described in the enclosure. 



(U //FQUQ) I concur in the report of the Inspector General and the General 
Counsel and hereby make it our combined report. 

MICHAEL V. HAYDEN 
Lieutenant General, USAF 
Director, NSA/Chief, CSS 

EncJ Approved for Release bv MSA on 12-19-2014, FOIA Case # 70809 (Litigation) 

Quarterly Report with NSA/CSS Policy 1-23 
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SUMMARY 


PURPOSE: (U/T FOUOt To forward to the Intelligence Oversight Board (IOB) of the 
President’s Foreign Intelligence Advisory Board, via the Assistant to the Secretary of Defense 
for Intelligence Oversight (ATSD(IO)), NSA’s quarterly report on its intelligence activities. 


BACKGROUND: (U //FOUO t Executive Order 12333 and Executive Order 12863 
require Intelligence Community agency heads and Intelligence Community General Counsels 
and Inspectors General, respectively, to report to the IOB on a quarterly basis concerning 
intelligence activities that they have reason to believe may be unlawful or contrary to Executive 
Order or Presidential Directive. The enclosed memorandum covers all reportable activities 
known to the Inspector General and General Counsel. Per PIOB letter of 6 August 1982, 
Agency heads are responsible for reporting separately any additional reportable activities 
known to them, unless the President has specifically instructed that the Board is not to be 
informed. The Director’s signature signifies that no other activities that require reporting are 
known to him. 


RECOMMENDATION: (U) Director sign the enclosed memorandum. 
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1. (U) INSPECTOR GENERAL ACTIVITIES 

a. (C//3I) During this quarter, the Office of Inspector General (OIG) reviewed 
various intelligence activities of the National Security Agency/Central 
Security Service (NSA/CSS) to determine whether they were conducted in 
accordance with applicable statutes, Executive Orders (E.O.s), Attorney 
General procedures, and DoD and internal directives. With few exceptions, 
the issues presented were routine and indicated that the operating elements 
understand the restrictions on NSA/CSS activities. 


b. (S//3I) The NSA OIG completed an inspection of the|_ 

i Division. The inspection found no intelligence 
oversight (I/O) shortcomings. The Division submits quarterly compliance 
reports to the Information Assurance Directorate. All employees participate 
in annual refresher training, which is tracked by division management. 


]b)(3)-P.L. 86-36 


c. (TS//GD - A joint investigation by the NSA and[ 



2. (U) GENERAL COUNSEL ACTIVITIES 


WT 

(b)(3)-P.L. 86-36 
(b)(3)-50 USC 3024(i) 
(b)(3)-18 USC 798 

(C//SI) The NSA OGC reviewed various intelligence activities of the NSA/CSS 
to determine whether they were conducted in accordance with applicable 


statutes, E.O.s, Attorney General procedures, and DoD and internal 
directives. The OGC advised Agency elements on a number of questions, 


including the collection and dissemination of communications of or 
concerning U.S. persons; the reporting of possible violations of federal 
criminal law contained in SIGINT product; the testing of electronic 
equipment; and the applicability of the Foreign Intelligence Surveillance Act 
(FISA). With few exceptions, the issues presented were routine and indicated 
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that the operating elements understand the restrictions on NSA/CSS 
activities. The OGC did not file any reports with the Intelligence Oversight 
Board during this quarter. 

3. (U) SIGINT ACTIVITIES 

ar-fS // St ) Collection Against U.S. Persons 


(b)(1) 

(b)(3)-P.L. 86-36 


(1) (U) Intentional 


-{S //SI) During this quarter, t he P IRNS A granted approval for 
consensual collection againstll persons. DIRNSA-approved 
consensual collection against | | U.S. persons was routinely 

terminated this quarter. 


fS//3I) The Attorney General (AG) granted authority to collect the 
communications of | |U.S. persons during this quarter. (b)(1) 

(b)(3)-P.L. 86-36 

(2WU) Unintentional (b)(3)-18 USC 798 

w (U) unintentional ^ 1 _ (bV^ -50 USC 3024(i) 


a.TT 3//SB 


(b)(1) 

(b)(3)-P.L. 86-36 

(b)(3)-50 USC 3024(i) b.- (TS//3B [ 


1 inadvert entlvtar getedthe l : 

holdi ng dual U.S.- I I citizenship. Upon learning of her status.] 
| | in consultation with the OGC, detasked her number. 


]iiu£ 


was a dual U.S.j 


] learned tha t. 


citizen. All numbers and collection associated with the official were 


disseminated. At the same time, 

|identified|^ 


who are U.S. citizens,!" 


immediately detasked. There was no reporting on relevant collection, 
which also was destroyed. 


c. (T S//SI) -SID inadvertent ly colle cted against a U.S. citizen abroad 

from| . ~~| When | 1 

l expiredf SID aborted what it thought to 


(b)(1) 

(b)(3)-P.L. 86-36 


be all database queries rel ated to him. However, when SID reinstated 
the queries after receiving | li t discovered 


that 


l 


The office 


attributed the oversight to human error. No intercepts were obtained 
during this period. 
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d.7S//SI//NP) This quarter,-unintentional retrievals using the 

lraw traffic files(b)(3)-P.L. 86-36 


(b)(1) 

(b)(3)-P.L. 86-36 


F ncidents against U.S. persons in addition to the 

. i i m i • r* l l a i 


resulted in 

incident involving the queries described in Paragraph c. above. All 
incidents were reported to responsible oversight officials and corrective 
actions were taken. All unauthorized traffic collected has been 
destroyed. 


/' 


b. (U //FOUO) Dissemination of U.S. Identities 


(1) (U) Intentional 

~(3//0B In acc ordance with section 7 of USSID 18, U.S. identities were 
disseminated | ~] times during this quarter. The following table 
shows the justification and the number of instances of dissemination: 
In the “Unmasked by Analyst” column, the U.S. identity was revealed 
in a serialized end product; in the “Unmasked at User Request” 
column, a U.S. identity was released to a user at the user’s request. 


JUSTIFICATION 

Unmasked by 
Analyst 

Unmasked at 

User Request 

TOTAL 

7.2.C Necessary 

(b)(1) 

(b)(3)- 

7.2.C.1 Foreign Official 

7.2.C.3 International Narcotics 

7.2.C.4 Criminal Activity 

7.2.C.7 U.S. Government Official 

TOTAL 


(2) (U) Unintentional 

~(0//GB During this quarter, | [ SIGINT products were canceled by SID (b)(1) 
because the y contained the id entit ies of U.S. persons, organizations, or ( b )(3)-P L. 86-36 
entities! lof these related to | | targets determined to be U.S. 

persons! - Those products that contained information derived from 
communications of U.S. persons were not reissued. 


iTG//Gh j R eleased a total of ) R eports containing the 

identities of USPs or based on the c ommun ications of persons later 
identified as USPs. In all instances, |~ 


-- - L ---- 

Jcancelled the reports, 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-50 USC 3024(i) 
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(b)(3)-P.L. 86-36 


which were either not reissued or were reissued with the proper 
minimization. 

. ( 

(3) (U) Raw Traffic Dissemination Outside the SIGINT ( 
Production Chain .....— i( 




lin response to an RFI from the 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-18 USC 798 
(b)(3)-50 USC 3024(i) 


(b)(1) 

(b)(3)-P.L. 86-36 


(b)(3)-P.L. 86-36 


released an e-mail outside the SIGINT production chain 


containing unminimized U.S. 


Itelephone numbers. 


SID notified the 


of the error, at which time thel 


deleted 


the files and issued a corn 
personnel assigned to the 
training. 



_la member of the 

Isent an e-mail outside the ! 


nt future incidents, all 
lave received refresher 


production chain 


S' *X> 


secause some 


unauthorized individuals could h ave accessed the database, SI D shut 
down the webpage to install a fix, I j 


CrfS^j_| entered_ [information into a database, (b)(3)-P.L. 86-36 

making it available throug h a| _ |outside th e 

SIGINT production chain. | | 

interface users who were not authorized to view SIGINT information, 
may have accessed this information. Information from a SIG INT-only 
database containing! I 

| also may have been available through the 
interface, but it is not certain that users were able to see this 

information. Corrective measures have been taken. 


(b)(1) 

(b)(3)-P.L. 86-36 


_ The SID ensures that the 

personnel are trained by the OGC on NSA’s legal restrictions and on 
proper handling and dissemination of SIGINT data| 

| ~| Personnel working in or with SiD during t his 

quarter included representatives of thel 


(b)(3)-P.L. 86-36 
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4. (U) OTHER ACTIVITIES 

(U/ /FQUQ) F ISA Incidents 

a . (TG//GI//NF) | 


|SID discovered_ 

bbtained from the[^ 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-18 USC 798 
(b)(3)-50 USC 3024(i) 
|of transcrip ts 


[ 


^_ I 

|that ha d been retained beyond the r equired destruction date. Some 
Jranscriptsl | are involved. The OIG is 

investigating how ] | transcripts came to be retained, and 

will report the results of its investigation when it is complete. 


b. TT S//OI//NF) [ 
informatio n derived ff om 
required by[ 


SID publis hed a report containing 

i _wi thout the I Icav eat 

The SID found the report f I while 


OGA 
(b) (7) 


(E) 


researching an unrelated issue in a database. Subsequent research revealed 
th at the error occurred w hen appropriately cleared SID personnel with access 


to 


NSA subject matter expert[ 


1 f orwarded the information to an unindoctrinated 


jwho was not aware of (b)(3)-P.L. 86-36 


the source of the information. SID cancelled the report and reissued it with 
the caveat. S ince this incident oc curred because the expert had not received 
a briefing on procedures have been implemented to brief 

everyone who might handle this material rather than only those who have 

access to the database containing 


(U) Assistance to Law Enforcement 


(3//Sfi"During this quarter, the SID approved requ ests for technica l 

assistance from law enforcement, including requests froml I . (b)(1) 

- 1 - & — 3 --1 (b)(3)-P.L. 86-36 


Assistance included! 
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(U) Working Aids 

(U/ /FOUO) The SID maintains "U.S. Identities in SIGINT" and a 
matrix of blanket reporting waivers on its web page for use by all NSA/CSS 
analysts. The E.O., NSA/CSS Policy 1-23, DoD Regulation 5240.1-R, and 
USSID 18 are also available on-line. Several offices in SID maintain files to 
be used to prevent targeting of U.S. persons. 

(U) Intelligence Oversight Training 

a. (U// FOUQ ) In March 2004, SID implemented its new I/O training program, 
which allows employees to access the required documents and register their 
compliance on the web. The new program reminds employees that, 

(U) “The primary document governing NSA's intelligence activities is Executive 
Order 12333. In addition, NSA employees are subject to DoD Regulation 
5240.1-R ..., which implement(s) the Executive Order. For SID employees, 

USSID 18 provides the SIGINT minimization procedures required by these 
documents and the Foreign Intelligence Surveillance Act. Finally, NSCID 6 defines 
SIGINT and prescribes the conduct of SIGINT activities.” 

b. (U //FOUO) In response to the December 2001 NSA OIG report, Strategic 
Assessment of Intelligence Oversight, Agency leadership revised NSA/CSS 
Directive 10-30, by including more detailed guidance about I/O training and 
quarterly reporting requirements. NSA issued the revised procedures as 
NSA/CSS Policy 1-23. A copy of the procedures is enclosed. 
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